Merge pull request #8 from nautible/feature/issue68

Feature/issue68
nautible · Aug 8, 2022 · f534775 · f534775
2 parents a22b00c + df41b7c
commit f534775
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
@@ -8,6 +8,10 @@ on:
     branches: [ "develop","feature/*","hotfix/*" ]
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build:
 
@@ -42,9 +46,8 @@ jobs:
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        aws-region: us-east-1
+        role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/nautible-dev-githubactions-ecr-access-role
+        aws-region: ap-northeast-1
     - name: Login to Amazon public ECR
       id: login-ecr
       run: |